next »

[Maltego Forum]

Maltego Forum » Development » User Transforms
Trouble with transform to URL

[kpyke]

I'm having trouble populating a maltego.url entity.  This is my XML output is below.  Here is the problem:

When I do the transform (from a phrase) I hit a database and get the URL.  When I return, I get a Website entity, an unknown entity (from the Entity Type="mtg") but no URL.  I get no errors, no indication at all as to why it won't display.  Does anyone have any idea why this is broke?  I'm completely out of ideas.

<MaltegoMessage>
    <MaltegoTransformResponseMessage>
        <Entities>
            <Entity Type="maltego.URL">
                <Value>http://trafficconverter.biz</Value>
                <AdditionalFields>
                    <Field Name="URL" DisplayName="URL Data">http://trafficconverter.biz</Field>
                </AdditionalFields>
            </Entity>
            <Entity Type="mtg">
                <Value>http://trafficconverter.biz</Value>
                <AdditionalFields>
                    <Field Name="URL" DisplayName="URL Data">http://trafficconverter.biz</Field>
                </AdditionalFields>
            </Entity>
            <Entity Type="Website">
                <Value>http://trafficconverter.biz</Value>
            </Entity>
       </Entities>
    </MaltegoTransformResponseMessage>
</MaltegoMessage>

[AndrewMacPherson]

Hi!

The issue is that the URL entity is a complex type that requires a few more fields than just the value, essentially for your example you would want to use the following:
 
<MaltegoMessage>
   <MaltegoTransformResponseMessage>
       <Entities>
           <Entity Type="maltego.URL">
               <Value>http://trafficconverter.biz</Value>
               <AdditionalFields>

       <Field Name="theurl" DisplayName="URL">http://trafficconverter.biz</Field>
       <Field Name="fulltitle" DisplayName="Full page title">oh hi, this is my really really cool webpage.</Field>

               </AdditionalFields>
           </Entity>
           <Entity Type="mtg">
               <Value>http://trafficconverter.biz</Value>
               <AdditionalFields>
                   <Field Name="URL" DisplayName="URL Data">http://trafficconverter.biz</Field>
               </AdditionalFields>
           </Entity>
           <Entity Type="Website">
               <Value>http://trafficconverter.biz</Value>
           </Entity>
      </Entities>
   </MaltegoTransformResponseMessage>
</MaltegoMessage>

 
This is covered in the transform specification that can be found here: https://www.paterva.com/web5/documentation/localTransforms-SpecIII.pdf
 
Of course we are always more than happy to help people extending Maltego, especially if you are sharing it. One thing i would recommend is that if you are looking at local transforms, rather have a look at the new TDS which makes sharing and distributing the transforms (even if not within public space) so much easier: https://www.paterva.com/web5/TDS/
 
Hope this helps!
-AM